Access Control Context Administrator (for Pilot Implementation)

Role Role: SAP_PLMWUI_DEMO_ADMINISTR2_RM

This role allows the user to accomplish all administration tasks related to access control contexts, objects, and object transfer. Users can also act as proxy for all members in a context, as this role grants all activities necessary for processing objects. This role is especially suited for use in pilot implementations or small companies with low division of work in administration.

Caution Caution

This role should be used as a demo role with demo users only. A demo role must not be used in a production system in case it contains wildcards “*” (asterisks) for parameters, which might grant too many authorizations to users. After copying this role to a production system, each authorization parameter containing an asterisk must be thoroughly checked before use.

End of the caution.

This role includes authorizations for Recipe Development.

Object Type	Activity	Description/Comments	Corresponding Activity in Database Table`TACT`
Access Control Context	Create or generate	Creating subordinate context views The General Data, Context Hierarchy and Roles/Users views are visible, but the Objects view is not.	01 (Create or generate)
	Change	Changing context This activity allows change contexts on the context screens. It allows the change of all views of the context screens.	02 (Change)
	Display	Displaying context This activity only allows access by means of the object navigator. The following views are visible: General, Structure andLinked Objects (only objects and contexts that the user has at least Display authorization for). Any user assigned through a context role to a certain context implicitly gets the Display activity granted for this context.	03 (Display)
	Delete	Deleting context	06 (Delete)
	Analyze	Analysis of context This activity allows displaying contexts on the context screens for audit purposes. All views of the context screens are visible.	71 (Analyze)
	Assign	Transferring and assigning objects to the context This activity also requires the granting of the Publish activity in the source context for the object to be transferred.	78 (Assign)
Material BOM	Create or generate	Creating material BOM This activity contains the right to assign classification data (class, characteristic) and to maintain characteristic values in the owning context.	01 (Create or generate)
	Change	Changing material BOM Changing classification included	02 (Change)
	Display	Displaying material BOM Displaying classification included	03 (Display)





	Delete	Deleting material BOM	06 (Delete)
	Administer	Displaying and maintaining ACLs and analysis of other user's authorization for the object This activity only works with activities Display or Change for the object.	70 (Administer)
	Publish	Transferring and assigning material BOM to an other context This activity also requires granting of Assign activity in the target context.	PU (Publish)
Document	Create or generate	Creating document This activity contains the right to assign classification data (class, characteristic) and to maintain characteristic values in the owning context.	01 (Create or generate)
	Create or generate		01 (Create or generate)
	Change	Changing document Changing classification included	02 (Change)
	Change	Changing document Changing classification included	02 (Change)
	Display	Displaying document metadata Displaying classification included	03 (Display)






	Delete	Deleting document	06 (Delete)
	Enter, Include, Assign	Reusing document This activity has currently no effect as the system always allows the reuse of documents if you have the right to display them.	22 (Enter, Include, Assign)
	Display application start	Starting an application to download and view files attached to the document	53 (Display application start)
	Administer	Displaying ACLs and analysis of other user's authorization for the object This activity only works with activities Display or Change for the object.	70 (Administer)
	Print	Printing files attached to the document that the viewer can interpret	80 (Print)
	Change status	Changing the status of the document	A3 (Change status)
	Publish	Transferring and assigning document to an other context This activity also requires granting of Assign activity in the target context.	PU (Publish)
	Create version	Creating a new document version	V1 (Create version)
Material	Display	Displaying material Displaying classification included	03 (Display)


	Create or generate	Creating material This activity contains the right to assign classification data (class, characteristic) and to maintain characteristic values in the owning context.	01 (Create or generate)



	Change	Changing material Changing classification included	02 (Change)
	Delete	Deleting material	06 (Delete)
	Enter, Include, Assign	Reusing material in material BOM item	22 (Enter, Include, Assign)
	Administer	Displaying and maintaining ACLs and analysis of other user's authorization for the object This activity only works with activities Display or Change for the object	70 (Administer)
	Publish	Transferring and assigning material to an other context This activity also requires granting of Assign activity in the target context.	PU (Publish)
Change Number	Create or generate	Creating change numbers This activity contains the right to assign classification data (class, characteristic) and to maintain characteristic values in the owning context.	01 (Create or generate)
	Change	Changing change numbers Changing classification included	02 (Change)
	Delete	Deleting change numbers	06 (Delete)
	Administer	Displaying and maintaining ACLs and analysis of other user's authorization for the object This activity only works with activities Display or Change for the object.	70 (Administer)
	Publish	Transferring and assigning change number to another context This activity also requires the granting of the Assign activity in the target context.	PU (Publish)
	Display	Displaying change number Displaying classification included	03 (Display)




	Enter, Include, Assign	You can use a change number when you change an object that has a reference to a change number.	22 (Enter, Include, Assign)



Engineering Record	Create or generate	Adding objects to engineering record Creating and changing process routing	01 (Create or generate)
	Change	Creating and changing process routing Adding objects included	02 (Change)
	Display	Displaying object Displaying assigned objects and notes	03 (Display)
	Delete	Deleting object Requires authorization to delete Access Variants	06 (Delete)
	Publish	Transferring and assigning object to another context This activity also requires the granting of the Assign activity in the target context.	PU (Publish)
Assembly Group	Create or generate	Creating assembly group	01 (Create or generate)
	Change	Changing assembly group	02 (Change)
	Display	Displaying assembly group	03 (Display)
	Administer	Administering assembly group	70 (Administer)
	Publish	Publishing assembly group	PU (Publish)
Assembly Header	Create or generate	Creating assembly header	01 (Create or generate)
	Change	Changing assembly header	02 (Change)
	Display	Displaying assembly header	03 (Display)
	Delete	Deleting assembly header	Delete
	Reuse	Reusing assembly header	22 (Enter, Include, Assign)
	Administer	Administering assembly header	70 (Administer)
	Publish	Publishing assembly header	Publish
Assembly Item	Create or generate	Creating assembly item	01 (Create or generate)
	Change	Changing assembly item	02 (Change)
	Display	Displaying assembly item	03 (Display)
	Delete	Deleting assembly item	Delete
Product Family	Change	Changing product family	02 (Change)
	Display	Displaying product family	03 (Display)
	Extended maintenance	Providing extended maintenance for product family	36 (Extended maintenance)
	Display ACL	Displaying ACLs for product family	70 (Administer)
	Maintain ACL	Maintaining ACLs for product family	70 (Administer)
	Publish	Publishing product family	Publish
Product Item	Change	Changing product item	02 (Change)
	Display	Displaying product item	03 (Display)
	Reuse	Reusing product item	22 (Enter, Include, Assign)
	Extended maintenance	Providing extended maintenance for product item	36 (Extended maintenance)
	Administer	Administering product item	70 (Administer)
	Publish	Publishing product item	Publish
Product Item Variant	Change	Changing product item variant	02 (Change)
	Display	Displaying product item variant	03 (Display)
	Extended maintenance	Providing extended maintenance for product item variant	36 (Extended maintenance)
	Administer	Administering product item variant	70 (Administer)
	Publish	Publishing product item variant	Publish
Product Variant	Change	Changing product variant	02 (Change)
	Display	Displaying product variant	03 (Display)
	Extended maintenance	Providing extended maintenance for product variant	36 (Extended maintenance)
	Administer	Administering product variant	70 (Administer)
	Publish	Publishing product variant	Publish
Product View	Change	Changing product view	02 (Change)
	Display	Displaying product view	03 (Display)
	Reuse	Reusing ACLs for product view	22 (Enter, Include, Assign)
	Extended maintenance	Providing extended maintenance for product view	36 (Extended maintenance)
	Administer	Administering product view	70 (Administer)
	Publish	Publishing product view	Publish
Recipe	Change	Changing object Changing classification included	02 (Change)
	Display	Displaying object Displaying classification included	03 (Display)
	Administer	Displaying ACLs and analysis of other user's authorization for the object This activity only works with activities Display or Change for the object.	70 (Administer)